Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
File: x3p2OSVWEYoM7rVBMGacjmlvFVs.mft (raw, json)
Hash identifier: VyNq2V6sAeO3z9jpw0/dUwdp2bT0jE4QqDsMXeTYmSU=
Subject key identifier: 7A:2C:3C:16:7C:83:AE:CC:C5:E4:DE:42:B6:12:F1:69:35:9C:EE:B0
Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
Certificate issuer: /CN=c77a76392556118a0ceeb54130669c8e696f155b
Certificate serial: 0194BC04E268A109EAEA2863D0E296F5DEB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:24 +0000
Manifest this update: Fri 31 Jan 2025 11:00:24 +0000
Manifest next update: Sat 01 Feb 2025 11:00:24 +0000
Files and hashes: 1: Bt61Duabnrfk_tvUxqrlxq35pFs.roa (hash: 3mTb4E/hZOVdEv0TkUnMgMT0a7EJ9fK0ZGjFdNjhe4g=)
2: x3p2OSVWEYoM7rVBMGacjmlvFVs.crl (hash: e6uHc5Kxzo+2etx8RH0I1KRhIC6C0Td5VDHuHJ5bcrc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e2:68:a1:09:ea:ea:28:63:d0:e2:96:f5:de:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b
Validity
Not Before: Jan 31 11:00:24 2025 GMT
Not After : Feb 1 11:00:24 2025 GMT
Subject: CN=7a2c3c167c83aeccc5e4de42b612f169359ceeb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:03:fa:91:cc:b2:6c:70:a8:9d:49:27:b9:
6c:c9:11:36:3b:34:03:93:43:ef:37:53:c8:49:b7:
ad:8b:f7:3f:8e:1b:55:cc:1f:95:16:01:d1:47:af:
d6:3e:6e:82:3a:c3:8c:c6:98:13:6e:e5:71:d5:40:
e6:e1:24:4f:16:9d:69:bd:15:82:ab:15:ef:ba:08:
c7:61:fa:16:20:0c:eb:15:00:82:1c:c3:4e:9f:fb:
37:9c:10:0e:b3:d3:c3:c5:ff:7c:11:f7:f3:c3:21:
81:40:d8:8b:f5:09:ce:f5:e4:ba:3d:84:ae:9f:8a:
15:bc:8d:6a:ac:50:42:58:59:b0:fc:6f:2f:55:9a:
b7:da:f9:10:d0:c1:e3:a9:7b:6d:5f:c2:e1:6c:0c:
d6:bd:68:50:51:de:02:56:fd:d3:76:1a:8d:be:3e:
9a:c5:67:ed:19:76:3d:a3:b3:17:66:4c:c6:33:f1:
8f:95:5a:2e:19:b3:24:98:b8:36:72:3e:b4:35:e2:
22:40:bf:10:5a:5f:7a:ba:89:bd:e4:85:58:34:fc:
9f:23:c3:b6:26:ae:0c:27:e7:98:85:58:c8:8f:f5:
6c:48:ef:27:2a:fc:9c:1f:a5:53:58:8b:3f:fb:9f:
d6:ec:82:03:54:03:35:47:ea:ab:81:92:64:93:0b:
ae:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2C:3C:16:7C:83:AE:CC:C5:E4:DE:42:B6:12:F1:69:35:9C:EE:B0
X509v3 Authority Key Identifier:
keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a1:d3:13:6b:25:16:88:fd:5c:8f:e6:47:79:51:39:1e:b9:
08:3f:cf:eb:fb:00:1b:58:99:87:b7:fa:c1:3c:13:0d:6b:c8:
36:d6:54:5a:98:b4:03:7f:bd:7f:bc:b6:61:dd:89:f7:f5:cb:
b3:5f:da:be:2a:32:ea:72:9e:70:e9:48:68:14:40:09:83:f4:
5f:14:17:c6:27:86:23:7c:69:bf:da:4a:37:ab:9f:b0:49:69:
a2:89:6e:64:4d:36:7d:23:7a:ef:2b:11:60:cb:b0:6a:5b:44:
b9:46:7f:8c:53:36:14:1b:c9:a1:90:ac:29:77:22:7e:5d:50:
36:76:09:fd:1a:59:b1:0f:1a:aa:2e:65:48:9d:7e:6e:04:d1:
cc:29:83:f9:78:26:db:14:7e:d1:04:ad:47:60:d4:c5:0d:f3:
f6:3c:cb:7c:d7:dd:17:e2:59:34:b2:54:d2:01:43:2d:24:93:
fb:c3:22:50:73:ab:d7:6b:ed:a9:b9:9b:57:cc:ee:b1:70:1d:
c8:7a:1c:68:a0:b1:1d:7c:3f:06:a2:bb:d7:c1:9e:9b:3b:58:
5c:d8:1c:ff:3d:d0:37:2c:8c:8c:4b:f8:8b:83:a5:11:f8:e9:
94:33:61:ec:0a:4f:f1:90:8c:66:b3:f4:a9:38:14:a8:14:38:
64:5b:fe:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:51 2025 by rpki-client